client
fragment 1400
port 3001
proto udp
dev tun
remote vpn.afuz.org
nobind

keepalive 30 120
comp-lzo

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

remote-cert-eku "TLS Web Server Authentication"
verify-x509-name "C=DE, ST=Bavaria, L=Wuerzburg, O=Amateurfunk Unterfranken e.V., OU=CA, CN=vpn.afuz.org, name=Amateurfunk Unterfranken CA, emailAddress=info@amateurfunk-unterfranken.de"
ns-cert-type server

auth-user-pass

key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
4e1df153226e3c7c2aad8772b34a00c0
ca3d18025aef3352a33428e0b42a4363
ba37af131827fc35f46f882f49d8b06c
0a5ee0e088a0f453c34a97247937a185
40b6f90961169af84eb47e51833600b7
405a6109c6a1012990b9c24ef15f8aea
630acdf09efd103753af145cbf3b62ac
6e2591491624fdc9c449a96c160c1166
43cdb3998704b26203d84e794dd43d1b
4195a04983523cd1c2e4883ae0bed55d
d6fae86114b3a58f0ee153e42b182b86
88b6207833ec5077f76da6e68b9b101e
ba9a95bc733eedcf7a1a782814a7f6c5
9a342c194f221f10ad5e2ec5064d036e
c7b5fb632cc74e0a8a18073b198da09f
a8d1cac687b540cc743dab0c94b21c20
-----END OpenVPN Static key V1-----
</tls-auth>

#route-nopull
#route 10.3.128.0 255.255.255.0

verb 4